Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/F28FkCdyuci3Fria3smj-aR0Mo8.roa
File: F28FkCdyuci3Fria3smj-aR0Mo8.roa (raw, json)
Hash identifier: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=
Subject key identifier: 17:6F:05:90:27:72:B9:C8:B7:16:B8:9A:DE:C9:A3:F9:A4:74:32:8F
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 0194266B6E67699408B6346E857A251E6FF5
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/F28FkCdyuci3Fria3smj-aR0Mo8.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202354
IP address blocks: 194.127.108.0/24 maxlen: 24
194.127.110.0/24 maxlen: 24
194.127.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6e:67:69:94:08:b6:34:6e:85:7a:25:1e:6f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176f05902772b9c8b716b89adec9a3f9a474328f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:3b:45:d9:05:c3:88:8a:23:49:0e:24:27:
2a:76:20:b2:23:ac:45:ad:fd:41:66:fd:79:64:72:
37:d0:25:d5:a3:3e:7b:62:e0:19:03:24:d0:01:29:
dd:f8:38:cd:2b:80:21:a4:a7:6f:09:4d:7a:0b:6f:
77:e7:fb:ec:a9:ca:c4:c8:a0:10:59:64:48:fe:b2:
95:5b:ce:e1:54:47:0f:6c:9b:6b:7e:89:c6:15:fb:
2e:a8:80:c8:71:ab:d5:29:08:4e:73:3e:97:3d:de:
08:af:62:01:20:b3:83:89:c9:c0:6c:31:3f:a7:de:
c9:a3:7f:68:4a:0d:20:b3:93:c4:33:b1:fb:0f:80:
d0:bf:16:58:2c:e6:95:bf:f1:5c:a6:a8:3e:ca:38:
c2:fa:f1:99:7b:0f:82:bc:e8:ad:82:fe:30:c1:ae:
35:1c:cd:7d:56:fb:d3:0e:80:03:51:ae:a4:e1:8f:
d9:8c:04:7a:de:ff:90:22:f7:5b:63:cd:3a:da:69:
19:26:2d:03:3a:7d:a1:a3:d1:93:f5:dd:ed:f3:d9:
03:9b:d8:07:25:7a:5c:6a:06:8a:b1:30:9d:d9:c8:
a5:69:72:71:27:c3:dc:ee:c9:33:24:26:26:e3:f2:
21:b2:b8:5e:ad:f9:2c:67:cb:66:2a:a1:5c:7e:aa:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6F:05:90:27:72:B9:C8:B7:16:B8:9A:DE:C9:A3:F9:A4:74:32:8F
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/F28FkCdyuci3Fria3smj-aR0Mo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.108.0/24
194.127.110.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:66:a7:f0:ee:7e:7f:da:d2:22:b9:77:22:38:8c:af:19:3f:
7d:2f:4a:ac:36:fd:be:ca:5e:9d:f4:68:bf:2b:d0:7d:d5:c3:
1c:2f:6f:ca:2d:f2:a5:7c:aa:c2:68:a0:01:5d:11:f1:6e:10:
3f:73:12:85:3c:5c:a4:5f:16:78:ab:99:bc:78:74:f3:b4:7a:
96:d8:f3:df:9e:0a:32:82:de:bf:d3:a7:d2:66:3f:6d:2a:9c:
cb:46:1b:3f:99:cc:cb:00:4d:02:d3:18:7c:ce:5f:f5:3d:3a:
e1:48:97:05:89:30:fe:bd:0d:3f:18:04:c6:5f:b1:07:8a:31:
78:43:39:63:9a:51:69:18:a7:c8:08:51:40:22:e6:0e:83:ad:
ad:8e:37:36:e4:75:32:a8:37:b5:53:e2:ef:a0:a1:f5:e7:f3:
74:ba:7f:34:91:a4:e7:ca:53:ce:06:b4:ef:6d:82:ee:3c:6f:
84:a9:5a:19:dd:ca:00:61:c1:b7:82:be:a4:8b:a7:7d:67:cb:
dc:99:09:84:85:f9:d5:b1:a2:aa:6f:d1:fe:1d:29:e4:07:f4:
84:4f:58:02:89:bb:93:4e:02:1d:3d:71:10:e9:94:06:11:95:
b3:9b:fa:fa:ab:3f:38:e1:41:7e:95:31:1b:13:fb:97:cf:d0:
d2:d1:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:50:36 2025 by rpki-client